tree 15dc73e96a4ef086ecf3fedfa821cffc5a2fa9b9
parent 891825fb96dfc23279b4a42f710d49e78e05b333
author Ross Kinsey <rossikinsey@gmail.com> 1584902210 -0400
committer Filippo Valsorda <filippo@golang.org> 1584982329 +0000

ssh: support aes256-cbc for passphrase-protected OpenSSH keys

The existing code for decrypting OpenSSH-format keys only allows aes256-ctr, the current ssh-keygen default.
However, the default encryption scheme was aes256-cbc until relatively recently, and some of these keys are still in use.
Support for aes256-cbc has been added.

Fixes golang/go#37939

Change-Id: I3730347109c5dd18e4cbe61b48bbca9566ad61d2
Reviewed-on: https://go-review.googlesource.com/c/crypto/+/224817
Reviewed-by: Filippo Valsorda <filippo@golang.org>